[cbs] fix _VALID_URL